HP Service Manager Server vulnerabilities

2 CVEs affecting HP Service Manager Server, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-4371, published 2016-06-19.

More from HP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2012-3250, published 2012-08-16. Medium severity, CVSS 5.0. EPSS: 2.4% chance of exploitation in the next 30 days. Unspecified vulnerability in HP Service Manager Server 7.11, 9.21, and 9.30, and HP Service Center Server 6.28, allows remote attackers to cause a denial of service via unknown vectors.
• CVE-2016-4371, published 2016-06-19. High severity, CVSS 8.0. EPSS: 0.8% chance of exploitation in the next 30 days. HPE Service Manager Software 9.30, 9.31, 9.32, 9.33, 9.34, 9.35, 9.40, and 9.41 allows remote authenticated users to obtain sensitive information, modify data, and conduct server-side request forgery…